Cloudflare conversation primer for IXL Learning — interactive model, plug your own numbers

Already on Cloudflare. Build your own ROI.

What if IXL consolidated
its video stack?

IXL's Content-Security-Policy headers currently allow Kaltura, Brightcove, JWPlayer, Wistia, and Cloudflare Stream. The interactive model below lets you toggle which vendors are actually in production and plug your real contract numbers — no made-up defaults.

ixl-csp-recon.sh
# What we found in IXL's CSP (May 2026)
$ curl -sI ixl.com
server: cloudflare ✓
$ grep -o 'video' csp.txt
→ *.kaltura.com
→ players.brightcove.net
→ *.jwplayer.com
→ fast.wistia.com
→ *.cloudflarestream.com ★
→ iframe.videodelivery.net ★
# Stream is already CSP-allowed.
$ echo "One binding away."

Step 1 · You drive · Step 2 · We compute

Build the model with your numbers.

Toggle the video vendors IXL actually uses today. Adjust the spend slider for each. Then plug in your real infrastructure numbers below. The ROI updates live.

A · Which video vendors are in production at IXL today?

K
Kaltura
Confirmed (partner 4764982)
$250K
$50K$600K
B
Brightcove
Detected in CSP
$120K
$25K$400K
J
JWPlayer
Detected in CSP
$75K
$15K$300K
W
Wistia
Detected in CSP
$35K
$10K$150K

Defaults are typical enterprise EdTech ranges — IXL's actuals could be 2x higher or half. Use the sliders to match your real contracts. Toggle off any vendor not actually deployed.

B · Infrastructure (monthly)

Plug in IXL's real numbers — or use the conservative defaults.

100
10 TB1,000 TB

~20% of 18M MAU × ~5 min/mo × 5 Mbps ≈ 100 TB. Adjust based on actual watch data.

30
5 TB500 TB

Library size × bitrate renditions. Higher if including family-of-brands archive.

5
1M100M
100
10M2,000M
Current state
AWS + 4 video vendors
AWS S3 storage$0
AWS CloudFront egress$0
S3 ops (read+write)$0
Video vendor licenses$0
Monthly all-in
$0
≈ $0/year
Proposed
Cloudflare Stream + R2 · 1 vendor
R2 storage$0
R2 egress (zero)$0
R2 ops$0
Stream delivery$0
Monthly all-in
$0
≈ $0/year

Estimated Annual Savings

$0
0% lower TCO · consolidates 4 video vendors

AWS S3 / CloudFront pricing is public-list. R2 is $0.015/GB stored, $0/GB egress. Stream is $5 per 1k min stored, $1 per 1k min delivered. Vendor consolidation savings come from the sliders you set above — toggle off any vendor not in production.

Methodology & assumptions

AWS pricing (public-list, 2026): S3 Standard storage $0.023/GB/mo, CloudFront egress $0.09/GB to internet, S3 Class A ops $0.005/1k, Class B $0.0004/1k.

Cloudflare pricing (public-list, 2026): R2 storage $0.015/GB/mo, R2 egress $0, R2 Class A $4.50/M, Class B $0.36/M.

Stream delivery estimate: derived from your egress TB ÷ 0.5 MB/min average ≈ minutes delivered × $1/1k min. Adjust if your true average bitrate differs.

Video vendor license ranges: based on typical enterprise EdTech contracts for K-12 platforms at IXL's scale. Slide each to your contract reality. Source: directional industry benchmarks — not IXL contract data.

What this model does NOT include: migration labor, training, dual-running period (typically 60-90 days), or new-revenue opportunity from the AI tutor enabled by Workers AI + AutoRAG.

For your CIO + CISO + VP Engineering

Cloudflare for IXL Learning.

Five solution areas. One platform. Click any pillar for the IXL-specific play.

01 / 05 · AI SECURITY

Student data never leaves CF.

K-12 has the strictest privacy bar: COPPA, FERPA, Student Data Privacy Pledge, 50 state laws. Workers AI + AI Gateway keep student prompts on Cloudflare's network — no third-party LLM gets minor PII.

AI GatewayWorkers AIFirewall for AIAI Audit

For IXL: block GPTBot, ClaudeBot, Google-Extended from scraping the 17K-skill curriculum.

02 / 05 · APP SECURITY

Back-to-school DDoS & bots.

September is IXL's Black Friday. Bot Management catches answer-key scrapers + credential stuffers harvesting student accounts. Rate Limiting blocks brute-force homework-cheating bots.

WAFDDoSBot MgmtAPI ShieldPage Shield

For IXL: already on CF edge. Augment with Bot Mgmt + Page Shield on /membership checkout (PCI scope).

03 / 05 · NETWORK AS A SERVICE

One network. 9 brands.

IXL operates 9 brands after Rosetta Stone + Wyzant + ABCmouse acquisitions. CNI direct interconnects to AWS kill cross-region egress between brands. Magic Transit always-on L3 DDoS for AWS origins.

Magic TransitMagic WANTunnelCNI

For IXL: Tunnel replaces ABCmouse's exposed CloudFront origin (currently detected).

04 / 05 · ZERO TRUST

Protect curriculum IP.

17,000 painstakingly-designed skill problems are IXL's moat. AI Prompt Protection blocks curriculum designers from leaking unreleased problems into ChatGPT. Email Security against district contract BEC.

AccessGatewayCASBDLPEmail SecurityWARP

For IXL: replaces VPN for engineering across 9 brands. Access in front of district admin portals.

05 / 05 · DEVELOPER PLATFORM

Consolidate the video stack. Build the AI tutor.

The headline play. Stream replaces Kaltura + Brightcove + JWPlayer + Wistia in one binding. R2 stores the family-of-brands archive at zero egress. Workers AI + AutoRAG enables the K-12 AI tutor that doesn't send student data to OpenAI.

StreamR2WorkersWorkers AIAutoRAGVectorizeDurable ObjectsD1

For IXL: Phase 1 Stream pilot → Phase 2 R2 archive → Phase 3 Workers AI tutor (net-new district upsell).

No big-bang migration

First 90 days.

Week 1-2

PILOT

Math videos onto Stream

Migrate ~600 Math videos from Kaltura. Same iframe pattern. CSP already allows it. Reversible — Kaltura stays as fallback.

Week 3-6

CONSOLIDATE

R2 for 9-brand archive

S3-compatible. Sippy migrates from S3 → R2 in the background. Cross-brand asset sharing stops being a budget conversation.

Week 7-12

NET-NEW REVENUE

AI tutor on Workers AI

COPPA/FERPA-safe student tutor. No data to OpenAI. Sells as a premium district tier — net-new ARR, not just cost savings.

Next Step

Bring your real numbers.

60-90 min workshop with your engineering + privacy teams. We'll plug IXL's actual Kaltura/Brightcove/JWP/Wistia bills into this model + tune the 5 pillars to your COPPA/FERPA reality.

Your Cloudflare contact

Andrew Geiser

ageiser@cloudflare.com

Start with the Week 1-2 Math video pilot — measurable ROI in one billing cycle, fully reversible.